Security Vulnerabilities - CVEs Published In January 2018
An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. XSS exists via the wp-admin/admin.php bg_color parameter.
CVSS Score
4.8
EPSS Score
0.002
Published
2018-01-13
An issue was discovered in the read-and-understood plugin 2.1 for WordPress. XSS exists via the wp-admin/options-general.php rnu_username_validation_pattern parameter.
CVSS Score
4.8
EPSS Score
0.003
Published
2018-01-13
An issue was discovered in the read-and-understood plugin 2.1 for WordPress. XSS exists via the wp-admin/options-general.php rnu_username_validation_title parameter.
CVSS Score
4.8
EPSS Score
0.003
Published
2018-01-13
An issue was discovered in the read-and-understood plugin 2.1 for WordPress. CSRF exists via wp-admin/options-general.php.
CVSS Score
8.8
EPSS Score
0.002
Published
2018-01-13
An issue was discovered in the booking-calendar plugin 2.1.7 for WordPress. XSS exists via the wp-admin/admin.php sale_conditions[count][] parameter.
CVSS Score
4.8
EPSS Score
0.002
Published
2018-01-13
A denial of service vulnerability in the Upstream kernel synaptics touchscreen controller. Product: Android. Versions: Android kernel. Android ID: A-62800865.
CVSS Score
7.5
EPSS Score
0.002
Published
2018-01-12
An elevation of privilege vulnerability in the Upstream kernel bluez. Product: Android. Versions: Android kernel. Android ID: A-63527053.
CVSS Score
7.8
EPSS Score
0.001
Published
2018-01-12
An elevation of privilege vulnerability in the Upstream kernel wifi driver. Product: Android. Versions: Android kernel. Android ID: A-64709938.
CVSS Score
7.8
EPSS Score
0.001
Published
2018-01-12
An information disclosure vulnerability in the Upstream kernel kernel. Product: Android. Versions: Android kernel. Android ID: A-38159576.
CVSS Score
7.5
EPSS Score
0.002
Published
2018-01-12
In libMtkOmxVdec.so there is a possible heap buffer overflow. This could lead to a remote elevation of privilege enabling code execution as a privileged process with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android kernel. Android ID: A-38308024. References: M-ALPS03495789.
CVSS Score
7.8
EPSS Score
0.002
Published
2018-01-12